入侵检测系统的误警问题分析及对策

On the Analysis with the Countermeasures on the Problem of Intrusion Detection System on False Positives and False Negatives

误报和漏报是影响入侵检测质量的问题之一,必须采用有效的方法和途径解决入侵事件的误报、漏报。本文介绍了传统的入侵检测技术,分析了产生误报、漏报的原因,提出了降低误警率的对策。并介绍了新型入侵检测系统采用的新技术。

False positives and false negatives is one of the questions on Influencing the intrusion detection system quality,must use the effective method and the way to solve this problem.This article introduces the traditional intru- sion detection technology,and analyzes the reasons,and proposes the countermeasures of reducing the rate of wrong reports to the police.And introduces the new technology of the new intrusion detection system.